Microsoft Copilot vulnerability leads to Surface firmware bricking
Story essentials
Microsoft, Jack Darcy (Security Researcher)
Global
March 2026
This page is produced by collecting and structuring multiple public reports. Sections based only on reporting or testimony affect the displayed assessment, and the page is updated when new information is identified.
About this article
COMPAMIR Editorial Team
The COMPAMIR editorial team brings together public reporting and links to the original coverage. We update the page as new information emerges.
Read our editorial policy- Earlier version 16/12/2026, 5:00:13 PM
Microsoft Copilot inadvertently triggered destructive firmware writes on Surface devices. The vulnerability allowed arbitrary writes to the embedded controller (SAM) when Secure Boot is disabled. Microsoft has committed to patching the issue and advises users to keep security features enabled.
Read next
Prioritized by shared people, places, and events.
Critical security vulnerability in PHP
A critical security vulnerability affects PHP, impacting two-thirds of websites globally. Developers released a patch, and operators are urged to update immediately. Several government websites in Germany, Finland, and Austria were taken offline as a precaution.